peter bassill · operator
$ cve CVE-2010-0733 JSON

CVE-2010-0733 EXPLOIT

3.5
LOW · CVSS 2.0 · EPSS 6.8% (pctl 94)

Patch early

A public exploit exists.

Description

Integer overflow in src/backend/executor/nodeHash.c in PostgreSQL 8.4.1 and earlier, and 8.5 through 8.5alpha2, allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with many LEFT JOIN clauses, related to certain hashtable size calculations.

Scoring

CVSS3.5 (LOW, v2.0)
VectorAV:N/AC:M/Au:S/C:N/I:N/A:P
EPSS6.85% — more likely to be exploited than 94% of all CVEs
WeaknessCWE-189
On CISA KEVno
Public exploityes
Published2010-03-19
Last modified2026-06-16

Affected (1)

VendorProduct
postgresqlpostgresql

Public exploits

SourceTitleDate
exploit-dbPostgreSQL 8.4.1 - JOIN Hashtable Size Integer Overflow Denial of Service2014-06-13

References

→ the Explorer  ·  watch your stack  ·  NVD